OpenAI Open-Sources Codex Security Scanning Tool, Integrating Vulnerability Detection into Developers' Command Line
1 day ago / Read about 0 minute
Author:小编   

OpenAI has officially announced the open-sourcing of its early-version command-line security tool—Codex Security CLI, which had been previously discovered by the community. Focused on a command-line interface, it also provides a TypeScript SDK interface, enabling the scanning of code repositories, the discovery and verification of security vulnerabilities, and support for embedding into CI/CD pipelines to automatically trigger detection with each code submission. The tool is simple to install but requires specific versions of Node.js, Python, and access rights to Codex Security. It supports two authentication methods: ChatGPT account login and API key. Additionally, users can customize the storage path for scan history. This move signifies that OpenAI is expanding its AI security capabilities from the model level to the developer toolchain.